5. Sensitive Information

information or an opinion (that is also Personal Information) about an Individual’s:

racial or ethnic origin;

political opinions;

religious beliefs or affiliations;

philosophical beliefs;

criminal record; and/or

sexual orientation or practices;

health information about an Individual, including:

any information or opinion about the Individual’s health, health services, or wishes regarding health care; and

information collected to provide, or in providing, a health service of any kind.

Provider collects health information from Individuals in providing the Services. If Individuals disclose other sensitive information to psychologists, this may be included in records created by psychologists and sometimes managed by the Provider. Individual psychologists, not the Provider, take responsibility for storing other sensitive information disclosed to psychologists during appointments (ie casenotes or session records).Provider may, however manage such information if psychologists cease to act in association with Provider and hand over records to Provider on termination.

(Provider Devices) devices operated by contractors to and employees of Provider’s business; and

(Paper Files) printed paper and files.

7. Security

Provider will take reasonable precautions to protect Personal Information from unauthorised access. This includes measures to secure the Provider’s physical facilities and electronic networks.Provider secures Personal Information that Provider collects with requirements and agreements between Provider and employees and contractors.

Provider limits access to personal information to those with a valid reason for using that information. Provider’s document storage includes security measures such as passwords, pins, encryption, session expiries, firewalls, SSL network encryption, SSL certificate and website transmission encryption, the use of reputable vendors (eg Amazon, Google and Health Kit), physical locks and storage on physical files and datacentres housing servers.

sharing information with administration staff and business service providers

11. Information requests in relation to family court orders and parent plans

Changes Psychology has a clear process for verifying the identify of any person requesting information in relation to a person under 18 years, if they are not the parent or caregiver that has initiated the engagement of our services, as well as verify that person’s right to access information about a child with written evidence, to ensure that we only share information with people who are appropriately authorised to access this information about a child.

Changes Psychology process for actioning information requests:

Step 1. We need to receive copies of the following documents via email or post, from people that have not personally initiated the engagement of a child with our services, before we are able to communicate any information in relation to a person under 18 years who is accessing our services:

A clear scanned copy of your drivers licence or Passport so we have evidence of your identify

A full copy of the family court order with your personal details as they appear on your proof of identity – please indicate which section/s or clause/s describe accessing health related information in relation to the child mentioned in the order

A letter from you stating your full name date of birth, the child’s name and date of birth, your relationship to the child and that you wish to request a written overview of health information in relation to this child and the purpose for this information request. Please note we only provide written overviews for information requests.

Step 2. As the contents of a written overview takes a psychologist time to carefully prepare and check over, and typically takes them 1.5 hours, we charge an information request service fee of $270 (1.5 hours @ our hourly rate of $180) to prepare and provide this overview.

We need to receive full payment t before commencing the preparation of this document via this secure payment link https://changespsychology.com.au/paymentclinical

We will provide the overview within 10 business days of receiving payment to prepare the document

This overview is not an assessment or report, as we have a company policy to not provide assessments or reports for family court and custody related purposes

As we are bound my our professional code of ethics to maintain confidentiality of the child and the parent who has engaged treatment from us, the overview will not contain records or transcriptions of information any parties have communicated in confidence. The overview will discuss the findings of any assessments conducted, interventions provided and recommendations the treating psychologist has made in regards to the child engaged in treatment.

Note: All information requests must meet the requirements stated above, and if they don’t, we will not be able to provide information in relation to any person under 18. Further emails or calls from anyone requesting information, will not remove the need to follow the processes outlined above, and alls such communications will be ignored or reported to the authorities if they are persistent or threatening in any way.

12. Service providers can access personal information

When Provider uses the services of companies that Provider works with to provide the Services, they may get access to the Provider’s data, including Personal Information. Such third party services may include:

Provider will only share Personal Information with these third parties to the extent reasonably necessary to perform their functions.These third parties may have their own privacy and security policies. For more information about this, please contact Provider using the details listed in the “contacting us” section below.

For information on disclosures to overseas recipients, see below.

13. Disclosing information overseas

We disclose Personal Information to overseas contractors in the Philippines for the purposes of administration and data-processing services.The Provider may store or process some Personal Information overseas. Individuals may not have the same rights relating to their information when it is overseas as they would under Australian privacy law.

By providing Provider with Personal Information, Individuals consent to the transfer of their Personal Information to overseas recipients as contemplated by this privacy policy.

If Individuals consent to overseas transfer, Provider is not accountable for overseas recipients’ handling of their information.

We take reasonable steps to ensure that the Personal Information that we transfer to overseas recipients will not be held, used or disclosed by the recipient of the information inconsistently with the APPs.

14. Contacting us

Individuals contact the Provider using the details below if they want to access, correct or delete Personal Information or lodge a complaint. Privacy Officer – steve@changespsychology.com.au

Provider reserves the right to refuse access or correction where there are reasonable grounds for doing so, for example if providing access would be unlawful or would compromise the privacy of another person.

15. Complaints process

If Individuals have a complaint about privacy, they can contact Provider using the details listed above.Provider will respond to complaints in writing within a reasonable period (usually 10 business days from the day Provider receives an email).

Provider will try to work with Individuals to resolve complaints entirely within 20 business days, although that period may be longer if it is reasonable to take longer given the nature of the complaint.

If Individuals are unsatisfied with our response, they may refer the complaint to the Office of the Australian Information Commissioner (http://www.oaic.gov.au/).

16. Amendment

Provider may amend the Privacy Policy at its sole discretion. Individuals that continue to use the Services after receiving notice from Provider of such an amendment, agree to be bound by the Privacy Policy as amended.

17. Definitions

Individual, Individuals

means a natural person.

Personal Information

means information about an Individual whose identity is apparent, or can reasonably be ascertained, from that information. This includes information like names, telephone numbers, email addresses and physical addresses.

Policy, Policies

means this document, drafted in accordance with the Privacy Act 1988 (Cth).

Provider

means Changes Psychology Pty Limited and its staff and contractors.

Service, Services

means the following services:

arranging appointments with qualified psychologists including telephone appointments, and home and school visits;